commspy comport monitor.
5658de4f256abc6e08c2fb5776d12766epd dump portscanner.
70dbe8a22a2644db88d9a3c93e56f4c7Gobbler packet sniffer.
fb93bed53300f2025eb15f74923a5007David LeBlanc's utility for monitoring malicious group creation by end users. For NT.
0fdc0cc946f3b6828fe735dfbd755193"Building a Windows NT bastion host in practice V1.01" (Adobe PDF zipped) - Building a Windows NT bastion host in practice V1.01 - This paper presents a checklist for converting a default Windows NT installation to a bastion host. A bastion host is a computer system that is exposed to attack, and may be a critical component in a network security system. Special attention must be paid to these highly fortified hosts, both during initial construction and ongoing operation. Bastion hosts can include Firewall gateways, Web servers, FTP servers, Name servers (DNS), Mail hubs and Victim hosts (sacrificial lambs).
47be9c534b5d26ab00f142c4e0025286DOS I-Scanner.
6c1ffcb3069a2e452454b4f2eac4ccccWinAudlog - New centralized logfile checking tool for auditing distributed system logs in a network and certify that intruders did not modify these logs.
a1ce5b52573c7dca2e16422f0cc1f8d2WDumpEvt v2.01 is an administration tool that makes it easy to manage all the information from Windows NT logs. Browse the eventlog tree, dump the data to a file in ASCII-delimited format for importing into a database or spreadsheet, or choose HTML format for an easy-to-read display. The resulting file can contain information such as type, number, and category of the event, plus computer name, date, user, description. Dump the data of the system, security, application log, or only a source, category, or event. Dump all the data or just the data from the last dump. Erase or save the data in the eventlogs, too. Schedule all these actions thanks to the LogSched service to have regular save or dump. Retrieve properties about eventlog files: events number, begin and end date, file size, etc. Shareware by Isabelle Vollant, www.wdumpevt.com
95ef31ba439b7bfd1bdb29431379a9dfNessusNT-981007.zip
f9d1acd304adee54f0eb4b7380c91af9Somarsoft RegEdit V2.0 - DLL callable by 32 bit Visual Basic that can be used to view and/or modify user registry profile.
0d2dbb6de98d97b8bfaccbe5fae4df0bSomarsoft DumpReg V1.1 - Windows NT and Windows 95 program to dump the registry, making it easy to find keys and values matching a string.
df64805072bca618a2d357a76c17aafeForensic Toolkit v1.4 contains several Win32 Command line tools that can help you examine the files on a NTFS disk partition for unauthorized activity. Excellent Open Source freeware from NT OBJECTives, Inc. web site for lots of excellent tools and the source code for some of their fine products.
2fa061835928ce69742d1cc0a8bbcb68NessusJ-JFC-980705.zip
c67850e0f859ea1ad8f7ecbc044e861fAFind is the only tool that lists files by their last access time without tampering the data the way that right-clicking on file properties in Explorer will. AFind allows you to search for access times between certain time frames, coordinating this with logon info provided from ntlast, you can to begin determine user activity even if file logging has not been enabled. This is the latest release of AFind.
b7468cc0570908d62f1f44afe0d51edecelsetupb.zip
6371549abf2c8ad3ec5884fd038a9b94Somarsoft DumpAcl V2.7.16 - Windows NT program to dump the permissions (ACLs) for the file system, registry, shares and printers in a concise, readable listbox format, so that "holes" in system security are readily apparent.
6f94d2c7078e5abfa353ccc42cb1c400Somarsoft DumpEvt V1.7.3 - Windows NT program to dump the event log, in a format suitable for importing into a database. Used as basis for eventlog managment system, for long-term tracking of security violations, etc.
2645ee0ea3db5502965605817a611a8cThere is also a DLL version of DumpEvt, which allows you to read the formatted event log from Visual Basic.
4b777ed0496e0eabbb3be9eb3b224ad4celsetup.exe
a2b09c366acc04e597c0c50b503ab472celsetup.zip
9b63b8ce3db2db8fc53c23bb0272104b
© 2012 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed